Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
File:                     w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft (raw, json)
Hash identifier:          7cY45PqmWgAuYuVJLybaAAtT8dK2w8yJYrhor+wZegM=
Subject key identifier:   DB:54:1E:80:21:2B:C1:8D:10:E7:F4:84:C3:09:5B:B4:B9:95:F0:C7
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Certificate issuer:       /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial:       019747E75F8D5E14DB3AF26D886BE629A3EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
Manifest number:          0BD0
Signing time:             Sat 07 Jun 2025 01:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:34 +0000
Files and hashes:         1: 6bwL5YHScOT2TjF50UOzWmSHFbM.roa (hash: J7fubjulsksJL2y5CCyjiA6636klGKicCVaiq1Tvfs4=)
                          2: w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl (hash: mepCBtLZxT8rUcEEX7DsV5qGjmAkANp4JzNQNJR/plQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:5f:8d:5e:14:db:3a:f2:6d:88:6b:e6:29:a3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
        Validity
            Not Before: Jun  7 01:00:34 2025 GMT
            Not After : Jun  8 01:00:34 2025 GMT
        Subject: CN=db541e80212bc18d10e7f484c3095bb4b995f0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:7f:5a:cf:9d:6e:e3:89:0d:62:86:e9:ae:
                    d6:b1:e2:d5:a9:a8:4b:23:6c:78:9c:3d:f6:cc:95:
                    44:ee:31:2f:7f:ff:b7:04:6f:2f:57:20:d4:cc:be:
                    4f:80:50:1f:e2:f5:8c:3b:61:13:18:d9:72:99:f1:
                    84:29:29:0d:0a:fa:97:6a:d3:b0:05:11:af:71:bf:
                    a7:60:f3:12:b1:49:09:1d:09:1c:d6:0e:12:dc:5f:
                    b9:5c:36:91:00:27:4a:10:31:86:31:38:0d:42:b5:
                    ff:4b:f0:f5:06:d5:72:d2:2b:8f:b3:cf:6d:3b:b7:
                    7c:77:21:be:69:40:87:c5:35:57:aa:7c:3a:c3:62:
                    f9:2f:6c:71:93:1b:20:0f:91:29:26:e8:df:ae:b4:
                    25:7b:79:8c:c7:71:ae:54:95:59:ec:63:65:66:a6:
                    b9:43:e3:ea:f8:f2:63:d3:d5:7b:9f:a9:66:9a:f7:
                    5d:da:6c:0d:ce:22:34:99:55:59:95:c4:cc:f8:44:
                    da:0a:21:cb:ea:ae:f6:31:28:fd:a5:6c:72:f5:b3:
                    ec:2d:d7:25:2d:7f:8a:30:5b:d9:9f:78:5a:a4:43:
                    ef:9a:b9:88:c4:93:ab:37:c3:7e:9d:e8:79:2c:a4:
                    c5:cd:7d:a1:07:d2:0f:0b:ed:07:45:0c:1e:28:16:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:54:1E:80:21:2B:C1:8D:10:E7:F4:84:C3:09:5B:B4:B9:95:F0:C7
            X509v3 Authority Key Identifier:
                keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3e:87:f7:82:c7:00:10:5c:f5:8f:77:aa:26:4e:c9:f5:f2:
         6f:2e:14:e5:06:b8:1a:2b:10:f7:82:a7:4e:bd:81:30:a1:7c:
         43:ba:7a:7b:b8:12:2b:59:11:4b:f9:fb:11:25:02:72:e1:3e:
         c5:56:5f:db:db:7f:8d:e0:99:ca:93:8e:87:85:2d:d1:1b:6c:
         38:cd:15:a8:9c:54:2f:8c:b7:40:f1:76:bf:8c:24:bf:e5:53:
         06:4c:a4:5b:bb:e5:e0:e4:11:70:8a:95:dc:4d:91:2c:e3:b4:
         a0:31:c4:72:0c:70:6d:7b:22:fc:cf:32:f1:9e:47:69:1d:29:
         0d:84:cf:d7:58:4f:82:2f:a3:f7:e1:0d:0d:f1:54:1d:1f:b0:
         4a:80:34:41:df:92:50:1b:53:cd:21:54:a2:54:3f:84:2a:aa:
         3a:2c:53:9f:0a:76:6b:88:51:fd:12:d6:ff:01:b2:65:61:88:
         e3:9d:3d:3e:61:9a:cf:cc:a0:c7:7b:2b:73:7e:6e:18:52:70:
         a2:bb:ac:03:84:52:a0:7b:07:af:3f:2a:cb:30:2e:5e:30:d4:
         d9:b4:4e:f0:ca:fe:f4:e2:70:cb:a4:91:27:6e:82:33:4f:70:
         ee:12:63:c2:ec:f9:23:d6:f2:13:23:d5:8f:92:bf:3f:75:7f:
         d9:ad:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:40 2025 by rpki-client